This Privacy Policy explains what information Ribbon Drop, LLC collects, how we use it, and the choices you have. It covers our website, our customers, and the business records in our Lists. We do not sell our customers' personal information.
1. Information we collect from customers
- Account and order details: your name, business name, email, phone (if you give it), billing address, the plan you chose, and the territory, specialty, or CRM details you enter at checkout.
- Payment information is collected and processed by Stripe. We see limited details, such as card brand, last four digits, and expiry, but we never receive or store full card numbers.
- Communications: emails and support requests you send us, and the onboarding content you provide for a website.
- Technical information: basic server logs, such as IP address, browser type, pages requested, and timestamps, which we use for security and troubleshooting.
2. How we use it
- to provide the Services: delivering Lists, building and hosting websites, billing, and support;
- to send service emails, such as receipts, renewal reminders, delivery notices, and policy changes;
- to send occasional product updates, which you can opt out of at any time with the unsubscribe link;
- to prevent fraud, abuse, and List redistribution, and to enforce our Terms;
- to comply with legal, tax, and accounting obligations.
3. Who we share it with
We share customer information only with service providers that help us run the business, under confidentiality obligations. These include payment processing (Stripe), email delivery, website hosting and CDN, and accounting. We also share it when the law requires, to protect our rights or others' safety, or as part of a merger or sale of the business, in which case this policy continues to apply. We do not sell or rent customer personal information, and we do not share it for cross-context behavioral advertising.
4. Records in our Lists
- Our Lists are compiled from public business records published by government agencies, such as health permits, liquor and business licenses, state professional licenses, the CMS NPPES NPI registry (organizations only), and FMCSA USDOT registrations.
- We design the Lists to contain business information only: the business name, business address, the business phone the agency publishes, category, filing type and date, and a link to the source record. We filter out individual practitioners, owner and officer names, personal emails, and cell-phone fields. Healthcare Lists include organizations only and never contain patient information.
- Some small businesses use a home address or personal phone as their official business contact. When we can identify this, we remove the record or the field.
5. Removal requests for listed businesses
If your business appears in a Ribbon Drop List and you would like it removed from future Lists, email [email protected] with the business name and address, or the source record ID. We will suppress it from future deliveries, normally within 10 business days. We cannot recall copies customers have already received, but our Terms forbid them from redistributing Lists. To correct the underlying public record, contact the agency that published it.
6. Cookies & analytics
Our marketing site uses no advertising pixels or third-party ad trackers. We may use privacy-friendly, cookie-less analytics to count visits. Stripe Checkout, which opens on stripe.com, sets its own cookies for fraud prevention and payment processing under Stripe's Privacy Policy. If we add other analytics or cookies, we will update this policy first.
7. Websites we build for clients
For websites we build and host, our client is responsible for that site's own privacy notice, and we process visitor information only on the client's instructions. By default, client sites use no ad trackers. Healthcare client sites never include forms that collect patient health information. They link to the practice's own scheduler or portal, which is governed by that provider's terms.
8. Retention & security
We keep customer account and billing records for as long as you are a customer, and afterward as needed for tax, accounting, and legal purposes, generally up to 7 years. Website backups are deleted 30 days after a site is cancelled. Server logs are kept for up to 90 days. We use reasonable administrative, technical, and physical safeguards, such as encryption in transit, access controls, and least-privilege access. No system is perfectly secure, though, and we will notify you of a breach affecting your information as the law requires.
9. Your choices & rights
- You can update your account and billing details in your billing portal, and you can unsubscribe from marketing emails at any time.
- Depending on where you live (for example, California or other U.S. states with privacy laws), you may have the right to request access to, correction of, deletion of, or a copy of your personal information, and to opt out of "sale" or "sharing." We don't sell or share it. To make a request, email [email protected]. We will verify your request and respond within the time the law requires, and we will not discriminate against you for exercising your rights. An authorized agent may submit a request on your behalf with proof of authority.
10. Children
The Services are for businesses and are not directed to children under 16. We do not knowingly collect children's personal information.
11. Changes & contact
We will post any changes here and update the date above. For material changes, we will email active customers before they take effect. Questions: Ribbon Drop, LLC · [email protected] · c/o Inc Authority RA, 111 Town Square Pl., Suite 1203, Jersey City, NJ 07310.